Advisory Catalog

PhpSpreadsheet allows unauthorized Reflected XSS in the constructor of the Downloader class

SiYuan has an arbitrary file deletion vulnerability

Karmada PULL Mode Cluster Privilege Escalation

PhpSpreadsheet allows unauthorized Reflected XSS in `Convert-Online.php` file

phpMyFAQ Vulnerable to Stored HTML Injection at FAQ

OpenShift Hive RCE through AWS/Kubernetes client configuration leads to privilege escalation

Better Auth has an Open Redirect Vulnerability in Verify Email Endpoint

Letta (previously MemGPT) incorrect access control vulnerability

changedetection.io Vulnerable to Improper Input Validation Leading to LFR/Path Traversal

Linux Kernel Out-of-Bounds Access Vulnerability

Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

TCPDF missing character escape on error messages

TCPDF has incorrect comparison

tecnickcom/tc-lib-pdf-font mishandles fonts

TCPDF lacks SVG sanitization

lgsl Stored Cross-Site Scripting vulnerability

Amazon Redshift Python Connector vulnerable to SQL Injection

Linux Kernel Out-of-Bounds Read Vulnerability

Navidrome Stores JWT Secret in Plaintext in navidrome.db

SQL injection in Apache Traffic Control

Path Traversal in file update API in gogs

Remote Command Execution in file editing in gogs

Systeminformation has command injection vulnerability in getWindowsIEEE8021x (SSID)

Socialstream has a Potential Account Takeover Vulnerability in Social Account Linking Due to Missing User Consent After OAuth Callback

GoPhish sends cleartext passwords

OpenShift Must Gather Operator Improper Input Validation vulnerability

WhoDB Allows Unbounded Memory Consumption in Authentication Middleware Can Lead to Denial of Service

pyrage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution

Astro's server source code is exposed to the public if sourcemaps are enabled

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

Non-linear parsing of case-insensitive content in golang.org/x/net/html

Spatie Browsershot Directory Traversal vulnerability

UniSharp Laravel Filemanager Code Injection vulnerability

Open Cluster Management vulnerable to Trust Boundary Violation

Next.js authorization bypass vulnerability

ASA-2024-0012, ASA-2024-0013: CosmosSDK: Transaction decoding may result in a stack overflow or resource exhaustion

MinIO vulnerable to privilege escalation in IAM import API

Laravel Pulse Allows Remote Code Execution via Unprotected Query Method

thorsten/phpmyfaq Unintended File Download Triggered by Embedded Frames

djoser Authentication Bypass

Potential Vulnerabilities Due to Outdated golang.org/x/crypto Dependency in NanoProxy

Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access

python-libarchive directory traversal

Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

OpenCTI is an open-source cyber threat intelligence platform. In versions below 6.2.18, because the function to limit the rate of OTP does not exist, an attacker with valid credentials or a malicious user who commits internal fraud can break through the two-factor authentication and hijack the accou

SiYuan has an arbitrary file read via /api/template/render

SiYuan has an arbitrary file read and path traversal via /api/export/exportResources

SiYuan has an arbitrary file write in the host via /api/asset/upload

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: [https://www.drupal.org/node/251466#s-becoming-owner-maintainer-or-co-mai...](https://www.drupal

Avenwu Whistle Cross-Site Request Forgery (CSRF)